We stand with Ukraine to help keep people safe. Join us
Wireshark
Wireshark
4.2
0.0
Wireshark free download for Mac

Wireshark

Version 4.2.3

Network protocol analyzer.

4.2
Based on 26 user ratesRead reviews & comments
Free
Absolutely Free

Wireshark overview

Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.

Wireshark has a rich feature set which includes the following:

  • Standard three-pane packet browser
  • Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
  • Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
  • The most powerful display filters in the industry
  • VoIP analysis
  • Live capture and offline analysis are supported
  • Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
  • Capture files compressed with gzip can be decompressed on the fly
  • Hundreds of protocols are supported, with more being added all the time
  • Coloring rules can be applied to the packet list, which eases analysis

What’s new in version 4.2.3

Updated on Feb 15 2024

Bug Fixes
  • Capture start fails when file set enabled and file extension not supplied if directory contains a period. Issue 14614.
  • Cannot drag and move custom filter buttons in toolbar. Issue 19447.
  • Not equal won’t work when used with wlan.addr. Issue 19449.
  • sshdump fails to connect with private key (ssh-rsa) Issue 19510.
  • ChmodBPF installation fails on macOS Sonoma 14.1.2. Issue 19527.
  • Windows installers should check for Windows 8.1. Issue 19569.
  • Fuzz job crash output: fuzz-2024-01-05-7725.pcap. Issue 19570.
  • Fuzz job crash output: fuzz-2024-01-06-7734.pcap. Issue 19578.
  • Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message. Issue 19580.
  • OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12. Issue 19581.
  • TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks. Issue 19589.
  • SMB1 replies from LAN Drive app only show up as NBSS Continuation Message. Issue 19593.
  • ciscodump - older SSH key exchange algorithms not supported. Issue 19594.
  • Problem decoding LAPB/X.25/FTAM after adding X.75 decoding. Issue 19595.
  • Wireshark Filter not working. Issue 19604.
  • CFLOW: failure to decode 0 length data fields of IPFIX variable length data types. Issue 19605.
  • Copy …​as Printable Text Feature Missing in 4.1/4.2. Issue 19607.
  • Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis. Issue 19609.
  • ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length. Issue 19626.
  • OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup. Issue 19642.
Updated Protocol Support
  • ASAM CMP, CAN, CFLOW, CMIP, CMP, DAP, DICOM, DISP, E2AP, GLOW, GOOSE, GTP, GTPv2, H.225, H.245, H.248, HTTP2, IEEE 1609.2, IEEE 1722, IPv4, IPv6, ISO 15765, ISUP, ITS, Kerberos, LDAP, MMS, NBT, NRUP, openSAFETY, P22, P7, PARLAY, RTMPT, RTP, SCSI, SOME/IP, T.38, TCP, TECMP, TFTP, WOW, X.509if, X.509sat, X.75, X11, Z39.50, and ZigBee Green Power
New and Updated Capture File Support
  • pcap and pcapng

Information

License

Free

Size

69.4 MB

Downloads

191301

App requirements

Try our new feature and write a detailed review about Wireshark. All reviews will be posted soon.

Write your thoughts in our old-fashioned comment

MacUpdate Comment Policy. We strongly recommend leaving comments, however comments with abusive words, bullying, personal attacks of any type will be moderated.
0.0

(0 Reviews of )

There are no reviews yet
  • Comments

  • User Ratings

Derekcurrie
Derekcurrie
Jun 16 2022
3.6.6
4.0
Jun 16 2022
4.0
Version: 3.6.6
There is a native ARM version of Wireshark now as well. M1 & M2 Mac users need not bother with the Intel version. You'll find it at the Dev site: https://www.wireshark.org/download.html
Derekcurrie
Derekcurrie
Apr 15 2022
3.6.3
4.0
Apr 15 2022
4.0
Version: 3.6.3
ARM versions of Wireshark are now available. If you have an M1 series Mac, be sure to get the Wireshark macOS Arm 64-bit .dmg version! The general downloads page is here: https://www.wireshark.org/download.html
anilmushi
anilmushi
Apr 23 2021
3.4.5
5.0
Apr 23 2021
5.0
Version: 3.4.5
The swiss army knife of packet analyzers. Incredible.
Macinman
Macinman
Jul 28 2019
3.1.0
0.0
Jul 28 2019
0.0
Version: 3.1.0
Hey guys, was curious if there is anyone here that uses Homebrew, I had upgraded to Wireshark 3.1.0 via the cask command in brew, then they released an update that put it back to version 3.0.3, which I had initially. I was just curious why? Thanks
nomorebugs
nomorebugs
Jul 25 2018
2.6.2
5.0
Jul 25 2018
5.0
Version: 2.6.2
greatest packet analysis tool ever
Nihilism4U
Nihilism4U
Jul 21 2017
2.4.0
0.0
Jul 21 2017
0.0
Version: 2.4.0
Link is wrong, goes to old version. correct 2.4 version https://2.na.dl.wireshark.org/osx/Wireshark%202.4.0%20Intel%2064.dmg
iGaucho
iGaucho
Nov 21 2015
2.0.0
0.0
Nov 21 2015
0.0
Version: 2.0.0
Finally it has a native UI and doesn't require X11/XQuartz!
hwgray
hwgray
Oct 29 2015
1.12.8
0.0
Oct 29 2015
0.0
Version: 1.12.8
Wireshark.org suggests that users of OS X try v2.0.0rc1, first. If it doesn't work for you, then try this version.
WordWeaver
WordWeaver
Mar 17 2015
1.12.4
0.0
Mar 17 2015
0.0
Version: 1.12.4
This may possibly be of help to other new WireShark users who are having trouble getting WireShark to launch in Yosemite. Some of this has been shared before, but there is a little added twist at the end which worked for me. I made repeated attempts to use both WireShark 1.12.4 and 1.99.3, but without success. Regardless of which version I used, WireShark keep freezing up during the initialization process. In the initialization window, WireShark would get as far as "Loading module preferences", or about three quarters of the way done, and in the bottom of the window it would say "Please wait while Wireshark is initializing..."; and then freeze-up. So I conducted some quick research on the web and discovered that I had to enter "sudo ln -s /opt/X11 /usr/X11" in the Terminal in order to restore a link an X11 link that Yosemite breaks. However, even that did not help. Next, I reinstalled XQuartz 2.7.7. Again, that didn't help either. Then I came across an online comment where someone stated that they typed "sudo wireshark" in the Terminal. Guess what? I don't know why, but it worked. The Terminal spit out the following, and then WireShark launched on my desktop: void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting 22:01:58 Dbg plugin_dir: /Applications/Wireshark.app/Contents/PlugIns/wireshark Now I can click WireShark's icon in the Dock, and it appears to be working fine.
Chocky
Chocky
Feb 14 2015
1.12.3
5.0
Feb 14 2015
5.0
Version: 1.12.3
Wireshark on Yosemite To get Wireshark working on Yosemite you will need to install X11 which may be found at: http://xquartz.macosforge.org/landing/ and then make the following link: $ sudo ln -s /opt/X11 /usr/X11
Jpinoniemi
Jpinoniemi
Jan 8 2015
1.12.1
5.0
Jan 8 2015
5.0
Version: 1.12.1
Wireshark 1.12.3 was released on 1-7-15
Holgorio
Holgorio
Sep 17 2014
1.12.0
4.0
Sep 17 2014
4.0
Version: 1.12.0
Wireshark 1.12.1 is available fixing several security issues with DoS vulnerabilities in some of their parsers or dissectors. Enjoy.
David-Morrison
David-Morrison
Apr 1 2013
1.8.6
0.0
Apr 1 2013
0.0
Version: 1.8.6
Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder. When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz. WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
Nicolasd
Nicolasd
Jun 17 2012
1.6.7
0.0
Jun 17 2012
0.0
Version: 1.6.7
Beware. Apple is REMOVING X11 in Mac OS X 10.8 Mountain Lion. Not an optional install. It's *GONE*! In a few months, Wireshark will be unusable on up-to-date Macs.
anonymous-dingo-5566
anonymous-dingo-5566
May 31 2012
1.6.7
0.0
May 31 2012
0.0
Version: 1.6.7
I just downloaded it for a networking class. On their site the version is 1.6.8, here it's 1.6.7. Please update as I depend on Macupdate for the most recent versions. Thanks
Anon42
Anon42
Mar 29 2012
1.6.6
0.5
Mar 29 2012
0.5
Version: 1.6.6
No longer supports 10.6.5 :-(
frequencydip
frequencydip
Nov 5 2011
1.6.3
4.5
Nov 5 2011
4.5
Version: 1.6.3
This program has been very useful in troubleshooting tracking and analytics. Using the GA debugger only helps for chrome, using this we can see the call any browser makes or even a connected iPad or iPhone!
JohnKHeath
JohnKHeath
Oct 22 2011
1.6.2
4.5
Oct 22 2011
4.5
Version: 1.6.2
After trying for a hundred times, I still have problems installing this program. Any workaround for Lion, or is it not supported?
JohnKHeath
JohnKHeath
Oct 5 2011
1.6.2
4.5
Oct 5 2011
4.5
Version: 1.6.2
I used to run WireShark in windows, now this version has even better functionalities in Mac. Works great, I like it.
angelowales79
angelowales79
Sep 30 2011
1.6.2
4.5
Sep 30 2011
4.5
Version: 1.6.2
Gotta love wireshark
CyberSkull
CyberSkull
Dec 10 2023
4.2.0
5.0
Dec 10 2023
5.0
Version: 4.2.0
RYU224
RYU224
Mar 6 2023
4.0.4
4.0
Mar 6 2023
4.0
Version: 4.0.4
Dogbert1
Dogbert1
Sep 9 2022
3.6.8
5.0
Sep 9 2022
5.0
Version: 3.6.8
Derekcurrie
Derekcurrie
Nov 18 2021
3.4.10
4.0
Nov 18 2021
4.0
Version: 3.4.10
Frankydin
Frankydin
Jan 6 2021
5.0
Jan 6 2021
5.0
Version: null
winonafonda
winonafonda
Nov 12 2020
5.0
Nov 12 2020
5.0
Version: null
somers96
somers96
Nov 6 2020
1.0
Nov 6 2020
1.0
Version: null
polejai538
polejai538
May 21 2020
5.0
May 21 2020
5.0
Version: null
Chocky
Chocky
Mar 1 2019
5.0
Mar 1 2019
5.0
Version: null
nomorebugs
nomorebugs
Jul 25 2018
5.0
Jul 25 2018
5.0
Version: null
Jpinoniemi
Jpinoniemi
Jan 8 2015
5.0
Jan 8 2015
5.0
Version: null
Holgorio
Holgorio
Sep 17 2014
4.0
Sep 17 2014
4.0
Version: null
Ededed
Ededed
Apr 22 2014
4.0
Apr 22 2014
4.0
Version: null
Alain-devroye
Alain-devroye
Nov 6 2013
3.5
Nov 6 2013
3.5
Version: null
Mac-Application
Mac-Application
Jul 27 2013
5.0
Jul 27 2013
5.0
Version: null
JaeyoonLee4930
JaeyoonLee4930
Apr 11 2013
5.0
Apr 11 2013
5.0
Version: null
bluecheese
bluecheese
Mar 16 2013
5.0
Mar 16 2013
5.0
Version: null
Anon42
Anon42
Mar 29 2012
0.5
Mar 29 2012
0.5
Version: null
frequencydip
frequencydip
Nov 5 2011
4.5
Nov 5 2011
4.5
Version: null
Lachtigall
Lachtigall
Nov 3 2011
1.5
Nov 3 2011
1.5
Version: null
JohnKHeath
JohnKHeath
Oct 22 2011
4.5
Oct 22 2011
4.5
Version: null
angelowales79
angelowales79
Sep 30 2011
4.5
Sep 30 2011
4.5
Version: null
anonymous-aardvark-5710
Jun 8 2011
5.0
Version: null
FAM9
FAM9
Jun 3 2011
4.5
Jun 3 2011
4.5
Version: null
Alcimedes
Alcimedes
May 17 2007
4.0
May 17 2007
4.0
Version: null
anilmushi
anilmushi
Jan 11 2030
3.4.5
5.0
Jan 11 2030
5.0
Version: 3.4.5
Free
Absolutely Free
How would you rate Wireshark?
Similar apps
Debookee
Analyze the information being sent over your network.
Is this app is similar to Debookee? Vote to improve the quality of this list.
Vote results
0
Upvotes
3
Total score
0
Downvotes
Cocoa Packet Analyzer
Network packet protocol analyzer.
Is this app is similar to Cocoa Packet Analyzer? Vote to improve the quality of this list.
Vote results
2
Upvotes
2
Total score
0
Downvotes
Charles
Java HTTP proxy and monitor.
Is this app is similar to Charles? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
Airfoil
Send audio from any app to AirPort Express/Apple TV and more.
Is this app is similar to Airfoil? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
PacketStream
Easy way to configure/use Apple network monitoring tools.
Is this app is similar to PacketStream? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes